@intentius/chant-lexicon-aws 0.46.0 → 0.49.0

package/dist/api/read-client.d.ts

@@ -171,6 +171,14 @@ export interface CloudControlDescription {
 export declare function parseResourceDescription(raw: unknown): CloudControlDescription | null;
 /** `GetResource` — the full live model for one identifier. */
 export declare function getResource(typeName: string, identifier: string, options?: AwsReadClientOptions): Promise<CloudControlDescription | null>;
-/** `ListResources` — every live resource of one type, paginated to exhaustion. */
-export declare function listResources(typeName: string, options?: AwsReadClientOptions): Promise<CloudControlDescription[]>;
+/**
+ * `ListResources` — every live resource of one type, paginated to exhaustion.
+ *
+ * `resourceModel` is Cloud Control's `ResourceModel`: the scope a child-typed
+ * listing requires (`{ RoleName }` for `AWS::IAM::RolePolicy`,
+ * `{ TopicArn }` for `AWS::SNS::Subscription`). The API takes it as a JSON
+ * *string*, the same double encoding `GetResource` answers with; this takes
+ * the object and encodes it so no caller repeats that detail.
+ */
+export declare function listResources(typeName: string, options?: AwsReadClientOptions, resourceModel?: Record<string, unknown>): Promise<CloudControlDescription[]>;
 //# sourceMappingURL=read-client.d.ts.map

package/dist/api/read-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read-client.d.ts","sourceRoot":"","sources":["../../src/api/read-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,OAAO,EAAmC,KAAK,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAEpF,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAM1F,sFAAsF;AACtF,MAAM,MAAM,WAAW,GAAG,CACxB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EACvD,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAO/C,2EAA2E;AAC3E,qBAAa,YAAa,SAAQ,KAAK;IAGnC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,gGAAgG;IAChG,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;gBAHtB,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM;IACvB,gGAAgG;IACvF,IAAI,CAAC,EAAE,MAAM,YAAA;CAKzB;AAED,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;OAIG;IACH,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC,kGAAkG;IAClG,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,iFAAiF;IACjF,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,uEAAuE;IACvE,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAWD,0FAA0F;AAC1F,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAG7D;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,MAAM,GAAG,SAAS,CAEpB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,oBAAoB,CAGzG;AAED,kEAAkE;AAClE,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,SAAiB,GAAG,MAAM,CAE9F;AAqCD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,EAAE,oBAAoB,GAC5B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAexB;AAID;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOlE;AAYD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAItF;AAED,0FAA0F;AAC1F,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAIrF;AAED;;;;GAIG;AACH,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,MAAM,CAAC,CA4BjB;AAED,kEAAkE;AAClE,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wEAAwE;AACxE,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,aAAa,EAAE,CAAC,CAS1B;AAED,gEAAgE;AAChE,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAOjC;AAID,wDAAwD;AACxD,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAoDD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,uBAAuB,GAAG,IAAI,CAQrF;AAWD,8DAA8D;AAC9D,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAGzC;AAED,kFAAkF;AAClF,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAiBpC"}
+{"version":3,"file":"read-client.d.ts","sourceRoot":"","sources":["../../src/api/read-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,OAAO,EAAmC,KAAK,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAEpF,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAM1F,sFAAsF;AACtF,MAAM,MAAM,WAAW,GAAG,CACxB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EACvD,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAO/C,2EAA2E;AAC3E,qBAAa,YAAa,SAAQ,KAAK;IAGnC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,gGAAgG;IAChG,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;gBAHtB,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM;IACvB,gGAAgG;IACvF,IAAI,CAAC,EAAE,MAAM,YAAA;CAKzB;AAED,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;OAIG;IACH,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC,kGAAkG;IAClG,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,iFAAiF;IACjF,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,uEAAuE;IACvE,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAWD,0FAA0F;AAC1F,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAG7D;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,MAAM,GAAG,SAAS,CAEpB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,oBAAoB,CAGzG;AAED,kEAAkE;AAClE,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,SAAiB,GAAG,MAAM,CAE9F;AAqCD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,EAAE,oBAAoB,GAC5B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAexB;AAID;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOlE;AAYD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAItF;AAED,0FAA0F;AAC1F,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAIrF;AAED;;;;GAIG;AACH,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,MAAM,CAAC,CA4BjB;AAED,kEAAkE;AAClE,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wEAAwE;AACxE,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,aAAa,EAAE,CAAC,CAS1B;AAED,gEAAgE;AAChE,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAOjC;AAID,wDAAwD;AACxD,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAoDD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,uBAAuB,GAAG,IAAI,CAQrF;AAWD,8DAA8D;AAC9D,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAGzC;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,oBAAyB,EAClC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACtC,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAqBpC"}

package/dist/composites/agentcore-agent.d.ts

@@ -16,6 +16,31 @@ import { type SubIntrinsic } from "../intrinsics.js";
  * `arn:aws:bedrock-agentcore:<region>:<account>:runtime/<id>/runtime-endpoint/<name>`.
  */
 export declare function agentCoreDefaultEndpointArn(runtime: InstanceType<typeof Runtime>): SubIntrinsic;
+/**
+ * Bedrock AgentCore's real limits, verified against the CloudFormation
+ * registry schema for `AWS::BedrockAgentCore::{Runtime,RuntimeEndpoint,Memory}`
+ * (#882).
+ *
+ * Exported for the same reason as `MICROVM_LIMITS` (#1374, #1420): a
+ * consumer driving AgentCore through another control plane needs the same
+ * numbers, and copying them is how two sources of truth start.
+ */
+export declare const AGENTCORE_LIMITS: {
+    /**
+     * `Runtime`/`RuntimeEndpoint`/`Memory` `Name`/`AgentRuntimeName` fields
+     * are bound to this pattern — no hyphens, unlike chant's usual kebab-case
+     * component names. `Gateway`/`GatewayTarget`/`WorkloadIdentity` names
+     * accept hyphens, so only the Runtime family needs sanitizing.
+     */
+    readonly runtimeNamePattern: RegExp;
+    readonly maxRuntimeNameLength: 48;
+    /** `Memory` event retention bounds, in days. */
+    readonly memoryEventExpiryDays: {
+        readonly min: 3;
+        readonly max: 365;
+        readonly default: 30;
+    };
+};
 /**
  * Managed-runtime code artifact — the S3-zip alternative to `containerUri`.
  * Mirrors CFN `Runtime.CodeConfiguration`: AgentCore runs a zipped agent on
@@ -72,7 +97,7 @@ export interface AgentCoreAgentProps {
      * managed one and fails on a real apply (#978, see the composite doc).
      */
     endpointName?: string;
-    /** Memory event retention, in days. CFN bounds: 3-365. Default: 30. */
+    /** Memory event retention, in days. Bounds: {@link AGENTCORE_LIMITS.memoryEventExpiryDays}. */
     memoryEventExpiryDays?: number;
     /** Gateway authorizer. Mirrors the generated `BedrockAgentCoreGateway_AuthorizerType` CFN enum. Default: "AWS_IAM". */
     gatewayAuthorizerType?: "CUSTOM_JWT" | "AWS_IAM" | "NONE" | "AUTHENTICATE_ONLY";

package/dist/composites/agentcore-agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentcore-agent.d.ts","sourceRoot":"","sources":["../../src/composites/agentcore-agent.ts"],"names":[],"mappings":"AACA,OAAO,EACL,IAAI,EACJ,WAAW,EACX,OAAO,EAOP,eAAe,EACf,MAAM,EACN,uBAAuB,EACvB,aAAa,EACb,gBAAgB,EACjB,MAAM,cAAc,CAAC;AAEtB;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAC3B,SAAS,GACT,aAAa,GACb,aAAa,GACb,aAAa,GACb,aAAa,GACb,aAAa,CAAC;AAElB,OAAO,EAAO,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAEvD;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,OAAO,CAAC,GAAG,YAAY,CAE/F;AAkBD;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6FAA6F;IAC7F,OAAO,EAAE,mBAAmB,CAAC;IAC7B,uGAAuG;IACvG,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAC7B,+CAA+C;IAC/C,WAAW,CAAC,EAAE,QAAQ,GAAG,KAAK,CAAC;IAC/B,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,oFAAoF;IACpF,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,mHAAmH;IACnH,qBAAqB,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;IACxD,6DAA6D;IAC7D,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uEAAuE;IACvE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,uHAAuH;IACvH,qBAAqB,CAAC,EAAE,YAAY,GAAG,SAAS,GAAG,MAAM,GAAG,mBAAmB,CAAC;IAChF,sFAAsF;IACtF,+BAA+B,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3C,4FAA4F;IAC5F,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,kFAAkF;IAClF,QAAQ,CAAC,EAAE,YAAY,CAAC,OAAO,WAAW,CAAC,EAAE,CAAC;IAC9C,QAAQ,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,WAAW,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,OAAO,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,QAAQ,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,aAAa,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,gBAAgB,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC/E,CAAC;CACH;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,YAAY,CAAC,OAAO,IAAI,CAAC,CAAC;IAChC,WAAW,EAAE,YAAY,CAAC,OAAO,IAAI,CAAC,CAAC;IACvC,OAAO,EAAE,YAAY,CAAC,OAAO,OAAO,CAAC,CAAC;IACtC,sFAAsF;IACtF,QAAQ,CAAC,EAAE,YAAY,CAAC,OAAO,eAAe,CAAC,CAAC;IAChD,MAAM,EAAE,YAAY,CAAC,OAAO,MAAM,CAAC,CAAC;IACpC,gBAAgB,EAAE,YAAY,CAAC,OAAO,gBAAgB,CAAC,CAAC;IACxD,OAAO,EAAE,YAAY,CAAC,OAAO,uBAAuB,CAAC,CAAC;IACtD,aAAa,EAAE,YAAY,CAAC,OAAO,aAAa,CAAC,CAAC;CACnD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,cAAc,2FA4HP,CAAC"}
+{"version":3,"file":"agentcore-agent.d.ts","sourceRoot":"","sources":["../../src/composites/agentcore-agent.ts"],"names":[],"mappings":"AACA,OAAO,EACL,IAAI,EACJ,WAAW,EACX,OAAO,EAOP,eAAe,EACf,MAAM,EACN,uBAAuB,EACvB,aAAa,EACb,gBAAgB,EACjB,MAAM,cAAc,CAAC;AAEtB;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAC3B,SAAS,GACT,aAAa,GACb,aAAa,GACb,aAAa,GACb,aAAa,GACb,aAAa,CAAC;AAElB,OAAO,EAAO,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAEvD;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,OAAO,CAAC,GAAG,YAAY,CAE/F;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB;IAC3B;;;;;OAKG;;;IAGH,gDAAgD;;;;;;CAExC,CAAC;AAaX;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6FAA6F;IAC7F,OAAO,EAAE,mBAAmB,CAAC;IAC7B,uGAAuG;IACvG,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAC7B,+CAA+C;IAC/C,WAAW,CAAC,EAAE,QAAQ,GAAG,KAAK,CAAC;IAC/B,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,oFAAoF;IACpF,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,mHAAmH;IACnH,qBAAqB,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;IACxD,6DAA6D;IAC7D,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+FAA+F;IAC/F,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,uHAAuH;IACvH,qBAAqB,CAAC,EAAE,YAAY,GAAG,SAAS,GAAG,MAAM,GAAG,mBAAmB,CAAC;IAChF,sFAAsF;IACtF,+BAA+B,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3C,4FAA4F;IAC5F,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,kFAAkF;IAClF,QAAQ,CAAC,EAAE,YAAY,CAAC,OAAO,WAAW,CAAC,EAAE,CAAC;IAC9C,QAAQ,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,WAAW,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,OAAO,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,QAAQ,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,aAAa,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,gBAAgB,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC/E,CAAC;CACH;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,YAAY,CAAC,OAAO,IAAI,CAAC,CAAC;IAChC,WAAW,EAAE,YAAY,CAAC,OAAO,IAAI,CAAC,CAAC;IACvC,OAAO,EAAE,YAAY,CAAC,OAAO,OAAO,CAAC,CAAC;IACtC,sFAAsF;IACtF,QAAQ,CAAC,EAAE,YAAY,CAAC,OAAO,eAAe,CAAC,CAAC;IAChD,MAAM,EAAE,YAAY,CAAC,OAAO,MAAM,CAAC,CAAC;IACpC,gBAAgB,EAAE,YAAY,CAAC,OAAO,gBAAgB,CAAC,CAAC;IACxD,OAAO,EAAE,YAAY,CAAC,OAAO,uBAAuB,CAAC,CAAC;IACtD,aAAa,EAAE,YAAY,CAAC,OAAO,aAAa,CAAC,CAAC;CACnD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,cAAc,2FAiIP,CAAC"}

package/dist/composites/bucket-deployment.d.ts

@@ -0,0 +1,82 @@
+/**
+ * BucketDeployment — the seeded-bucket shape: an S3 bucket sized to receive
+ * deploy-time content, encrypted and access-blocked by default, its
+ * deletion behaviour and (optionally) its public-read policy declared up
+ * front rather than left to CloudFormation's own defaults.
+ *
+ * `s3deploy.BucketDeployment` is the most-used CDK pattern across the
+ * aws-bench corpus (37 instantiations across 8 apps, chant#1139) and it
+ * names two things CDK bundles together that chant keeps apart on purpose:
+ *
+ *  - The bucket itself: `AWS::S3::Bucket` plus its encryption, access-block
+ *    and (for the static-site shape) website/public-policy configuration.
+ *    That is a fixed set of CloudFormation resources, so it is what this
+ *    composite declares — the same shape `LambdaS3` (../composites) already
+ *    gives a bucket, minus the Lambda trigger wiring.
+ *  - Uploading local files into it at deploy time. CDK does this with a
+ *    Lambda-backed custom resource (`cr.AwsCustomResource`, the same family
+ *    the epic notes maps to chant Ops rather than composites — chant has no
+ *    CloudFormation custom-resource machinery, and inventing one just to
+ *    reproduce a `PutObject` loop would be new plumbing for a solved
+ *    problem). chant already ships this as a deploy-time **capability**,
+ *    `s3-sync` (`../components/apply.ts`'s `createS3SyncCapability`, backed
+ *    by the real `aws s3 sync`/`aws s3 cp` CLI through `CloudExecutor`, with
+ *    the typed step-builder `s3Sync` in `../components/builders.ts`) — it
+ *    was defined for exactly this and, before this composite, had no
+ *    composite pairing it with a bucket to sync into. A component composes
+ *    the two:
+ *
+ *      const seeded = BucketDeployment({ bucketName: Sub`${AWS.StackName}-site` });
+ *      // ...component `deploy` phase:
+ *      s3Sync({ from: "archive:site-build", to: Sub`s3://${seeded.bucket.Ref}` })
+ *
+ * That split — graph-time declaration here, deploy-time action in the
+ * component layer — is the existing precedent (`s3-sync` shipped in #566
+ * unused by any composite until this one), not a new one invented for this
+ * composite.
+ *
+ * "Cleanup" (the epic's third word) is `removalPolicy`, CloudFormation's own
+ * `DeletionPolicy` on the bucket resource. CDK's `autoDeleteObjects` — the
+ * Lambda-backed hook that empties a bucket before CloudFormation is allowed
+ * to delete it — has the same custom-resource shape as content upload and
+ * the same answer: out of scope here, and worth an `s3 rm --recursive`
+ * step ahead of a stack teardown in the component that owns the deploy.
+ */
+import { type Value } from "@intentius/chant";
+import { Bucket, S3BucketPolicy } from "../generated/index.js";
+export interface BucketDeploymentProps {
+    /** `Value<string>`: a name is routinely built with `Sub`/`Ref` (#1366). Omitted lets CloudFormation generate one. */
+    bucketName?: Value<string>;
+    /** Enable S3 object versioning. Default: false. */
+    versioned?: boolean;
+    /**
+     * Static-website hosting: sets `WebsiteConfiguration` and — since a
+     * website bucket is read by anonymous visitors, not IAM principals —
+     * opens the public-access block and attaches a public-read
+     * `S3BucketPolicy` scoped to `s3:GetObject`. Omitted, the bucket stays
+     * fully private, matching every other composite bucket's default
+     * (`LambdaS3`, ../composites).
+     */
+    website?: {
+        indexDocument: string;
+        errorDocument?: string;
+    };
+    /** What CloudFormation does to the bucket when the stack (or the resource) is removed. Default: "retain" — CloudFormation's own default, and the safe one for a bucket a deploy has just put content into. */
+    removalPolicy?: "retain" | "destroy";
+    tags?: Array<{
+        Key: string;
+        Value: string;
+    }>;
+    defaults?: {
+        bucket?: Partial<ConstructorParameters<typeof Bucket>[0]>;
+        bucketPolicy?: Partial<ConstructorParameters<typeof S3BucketPolicy>[0]>;
+    };
+}
+export type BucketDeploymentResult = {
+    bucket: InstanceType<typeof Bucket>;
+} | {
+    bucket: InstanceType<typeof Bucket>;
+    bucketPolicy: InstanceType<typeof S3BucketPolicy>;
+};
+export declare const BucketDeployment: import("@intentius/chant").CompositeDefinition<BucketDeploymentProps, import("@intentius/chant").CompositeMembers>;
+//# sourceMappingURL=bucket-deployment.d.ts.map

package/dist/composites/bucket-deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucket-deployment.d.ts","sourceRoot":"","sources":["../../src/composites/bucket-deployment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,EAA4B,KAAK,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EACL,MAAM,EAON,cAAc,EACf,MAAM,cAAc,CAAC;AAGtB,MAAM,WAAW,qBAAqB;IACpC,qHAAqH;IACrH,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,mDAAmD;IACnD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE;QACR,aAAa,EAAE,MAAM,CAAC;QACtB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,8MAA8M;IAC9M,aAAa,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IACrC,IAAI,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE;QACT,MAAM,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,YAAY,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACzE,CAAC;CACH;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,MAAM,EAAE,YAAY,CAAC,OAAO,MAAM,CAAC,CAAA;CAAE,GACvC;IAAE,MAAM,EAAE,YAAY,CAAC,OAAO,MAAM,CAAC,CAAC;IAAC,YAAY,EAAE,YAAY,CAAC,OAAO,cAAc,CAAC,CAAA;CAAE,CAAC;AAE/F,eAAO,MAAM,gBAAgB,oHAiEP,CAAC"}

package/dist/composites/dynamodb-table.d.ts

@@ -0,0 +1,45 @@
+import { type Value } from "@intentius/chant";
+import { Table } from "../generated/index.js";
+export interface DynamoDBKey {
+    name: string;
+    type?: "S" | "N" | "B";
+}
+export interface DynamoDBCapacity {
+    readCapacity: number;
+    writeCapacity: number;
+}
+export interface DynamoDBGlobalSecondaryIndex {
+    name: string;
+    partitionKey: DynamoDBKey;
+    sortKey?: DynamoDBKey;
+    /** Defaults to "ALL" — projecting the whole item is the common case; narrow it deliberately. */
+    projectionType?: "ALL" | "KEYS_ONLY" | "INCLUDE";
+    /** Only meaningful with projectionType "INCLUDE". */
+    nonKeyAttributes?: string[];
+    /** PROVISIONED tables only. Falls back to the table's own capacity when a GSI doesn't need its own. */
+    provisionedThroughput?: DynamoDBCapacity;
+}
+export interface DynamoDBTableProps {
+    /** `Value<string>`: a name is routinely built with `Sub`/`Ref` (#1366). */
+    tableName?: Value<string>;
+    partitionKey: DynamoDBKey;
+    sortKey?: DynamoDBKey;
+    /** Defaults to "PAY_PER_REQUEST" — the recommended default for most workloads (matches LambdaDynamoDB). */
+    billingMode?: "PAY_PER_REQUEST" | "PROVISIONED";
+    /** Required when billingMode is "PROVISIONED"; ignored otherwise. Falls back to 5/5 (the DynamoDB console default) if omitted. */
+    provisionedThroughput?: DynamoDBCapacity;
+    globalSecondaryIndexes?: DynamoDBGlobalSecondaryIndex[];
+    /** Attribute name that carries the expiry timestamp. Enables TimeToLiveSpecification when set. */
+    ttlAttribute?: string;
+    /** Enables StreamSpecification. `true` defaults to NEW_AND_OLD_IMAGES (the shape most stream consumers want). */
+    stream?: boolean | {
+        viewType?: "NEW_IMAGE" | "OLD_IMAGE" | "NEW_AND_OLD_IMAGES" | "KEYS_ONLY";
+    };
+    defaults?: {
+        table?: Partial<ConstructorParameters<typeof Table>[0]>;
+    };
+}
+export declare const DynamoDBTable: import("@intentius/chant").CompositeDefinition<DynamoDBTableProps, {
+    table: import("@intentius/chant").Declarable & Record<string, string>;
+}>;
+//# sourceMappingURL=dynamodb-table.d.ts.map

package/dist/composites/dynamodb-table.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamodb-table.d.ts","sourceRoot":"","sources":["../../src/composites/dynamodb-table.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EACL,KAAK,EAQN,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,WAAW,CAAC;IAC1B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,gGAAgG;IAChG,cAAc,CAAC,EAAE,KAAK,GAAG,WAAW,GAAG,SAAS,CAAC;IACjD,qDAAqD;IACrD,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,uGAAuG;IACvG,qBAAqB,CAAC,EAAE,gBAAgB,CAAC;CAC1C;AAED,MAAM,WAAW,kBAAkB;IACjC,2EAA2E;IAC3E,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,YAAY,EAAE,WAAW,CAAC;IAC1B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,2GAA2G;IAC3G,WAAW,CAAC,EAAE,iBAAiB,GAAG,aAAa,CAAC;IAChD,kIAAkI;IAClI,qBAAqB,CAAC,EAAE,gBAAgB,CAAC;IACzC,sBAAsB,CAAC,EAAE,4BAA4B,EAAE,CAAC;IACxD,kGAAkG;IAClG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iHAAiH;IACjH,MAAM,CAAC,EAAE,OAAO,GAAG;QAAE,QAAQ,CAAC,EAAE,WAAW,GAAG,WAAW,GAAG,oBAAoB,GAAG,WAAW,CAAA;KAAE,CAAC;IACjG,QAAQ,CAAC,EAAE;QACT,KAAK,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACzD,CAAC;CACH;AAqBD,eAAO,MAAM,aAAa;;EAmDP,CAAC"}

package/dist/composites/ec2-instance-bundle.d.ts

@@ -0,0 +1,61 @@
+import { Instance, InstanceProfile, Role, SecurityGroup } from "../generated/index.js";
+/**
+ * One inbound rule for the instance's security group. Exactly one of `cidr`,
+ * `cidrIpv6`, or `sourceSecurityGroupId` selects the traffic source — the same
+ * constraint CloudFormation enforces on `AWS::EC2::SecurityGroup.Ingress`.
+ */
+export interface Ec2InstanceBundleIngressRule {
+    /** Starting port (or the only port, when `toPort` is omitted). */
+    fromPort: number;
+    /** Ending port of the range. Defaults to `fromPort` (a single port). */
+    toPort?: number;
+    /** IP protocol. Default: `"tcp"`. */
+    protocol?: string;
+    /** IPv4 CIDR source. */
+    cidr?: string;
+    /** IPv6 CIDR source. */
+    cidrIpv6?: string;
+    /** Security-group source (allow traffic from another SG rather than a CIDR). */
+    sourceSecurityGroupId?: string;
+    description?: string;
+}
+export interface Ec2InstanceBundleProps {
+    /** AMI id to launch. */
+    imageId: string;
+    /** VPC the instance and its security group live in. */
+    vpcId: string;
+    /** Subnet the instance launches into — fixes its AZ and public/private placement. */
+    subnetId: string;
+    /** EC2 instance type. Default: `"t3.micro"`. */
+    instanceType?: string;
+    /** SSH key pair name. Omit for keyless access (e.g. SSM Session Manager only). */
+    keyName?: string;
+    /** Plain-text user-data script; wrapped in `Fn::Base64` for the instance. */
+    userData?: string;
+    /** Inbound security-group rules. Default: none (no inbound traffic). */
+    ingress?: Ec2InstanceBundleIngressRule[];
+    /** IAM managed policy ARNs attached to the instance role. */
+    ManagedPolicyArns?: string[];
+    /** Inline IAM policies attached to the instance role. */
+    Policies?: ConstructorParameters<typeof Role>[0]["Policies"];
+    defaults?: {
+        role?: Partial<ConstructorParameters<typeof Role>[0]>;
+        instanceProfile?: Partial<ConstructorParameters<typeof InstanceProfile>[0]>;
+        sg?: Partial<ConstructorParameters<typeof SecurityGroup>[0]>;
+        instance?: Partial<ConstructorParameters<typeof Instance>[0]>;
+    };
+}
+/**
+ * EC2 instance bundle — instance + security group + role/profile + subnet
+ * placement, the hand-rolled unit the aws-bench corpus showed 25 times
+ * (`ec2.Instance`) alongside 79 `ec2.SecurityGroup` instantiations (#1139).
+ * `Ec2InstanceRole` already covers the role/profile half; this composite adds
+ * the instance and its security group, wired to that same role.
+ */
+export declare const Ec2InstanceBundle: import("@intentius/chant").CompositeDefinition<Ec2InstanceBundleProps, {
+    role: import("@intentius/chant").Declarable & Record<string, string>;
+    instanceProfile: import("@intentius/chant").Declarable & Record<string, string>;
+    sg: import("@intentius/chant").Declarable & Record<string, string>;
+    instance: import("@intentius/chant").Declarable & Record<string, string>;
+}>;
+//# sourceMappingURL=ec2-instance-bundle.d.ts.map

package/dist/composites/ec2-instance-bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ec2-instance-bundle.d.ts","sourceRoot":"","sources":["../../src/composites/ec2-instance-bundle.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,aAAa,EAAyB,MAAM,cAAc,CAAC;AAcrG;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC3C,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wBAAwB;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wBAAwB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC,wBAAwB;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,QAAQ,EAAE,MAAM,CAAC;IACjB,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kFAAkF;IAClF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,OAAO,CAAC,EAAE,4BAA4B,EAAE,CAAC;IACzC,6DAA6D;IAC7D,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,yDAAyD;IACzD,QAAQ,CAAC,EAAE,qBAAqB,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC7D,QAAQ,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,eAAe,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,EAAE,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,QAAQ,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC/D,CAAC;CACH;AAiBD;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;;;;;EAgDP,CAAC"}

package/dist/composites/ecr-repository.d.ts

@@ -0,0 +1,49 @@
+import { type Value } from "@intentius/chant";
+import { ECRRepository } from "../generated/index.js";
+export interface EcrLifecycleRule {
+    /** Rules are evaluated in ascending priority order; each image is matched by exactly one rule. */
+    rulePriority: number;
+    description?: string;
+    /** Defaults to "any" — matches every image regardless of tag state. */
+    tagStatus?: "tagged" | "untagged" | "any";
+    /** Only meaningful with tagStatus "tagged". */
+    tagPrefixList?: string[];
+    /** Only meaningful with tagStatus "tagged". */
+    tagPatternList?: string[];
+    countType: "imageCountMoreThan" | "sinceImagePushed";
+    /** Required (and only meaningful) with countType "sinceImagePushed". */
+    countUnit?: "days";
+    countNumber: number;
+}
+export interface EcrEncryption {
+    /** Defaults to "AES256" (Amazon S3-managed keys) when this block is provided without a type. */
+    type?: "AES256" | "KMS" | "KMS_DSSE";
+    /** KMS/KMS_DSSE only. Falls back to the default AWS-managed ECR key when omitted. */
+    kmsKeyId?: string;
+}
+export interface EcrRepositoryProps {
+    /** `Value<string>`: a name is routinely built with `Sub`/`Ref` (#1366). Omitted, CloudFormation generates one. */
+    repositoryName?: Value<string>;
+    imageTagMutability?: "MUTABLE" | "IMMUTABLE" | "MUTABLE_WITH_EXCLUSION" | "IMMUTABLE_WITH_EXCLUSION";
+    /** Defaults to true — scanning freshly pushed images is the safe default for a new repository. */
+    scanOnPush?: boolean;
+    /**
+     * Lifecycle rules, evaluated in `rulePriority` order and rendered into the repository's
+     * `LifecyclePolicyText`. Defaults to a single "expire untagged images after 14 days" rule
+     * -- AWS's own starter policy -- when omitted. Pass `[]` to ship the repository with no
+     * lifecycle policy at all.
+     */
+    lifecycleRules?: EcrLifecycleRule[];
+    encryption?: EcrEncryption;
+    /** If true, deleting the repository force-deletes its contents instead of requiring it to be empty first. */
+    emptyOnDelete?: boolean;
+    /** JSON repository policy document (cross-account pull access, etc). */
+    repositoryPolicy?: Record<string, unknown>;
+    defaults?: {
+        repository?: Partial<ConstructorParameters<typeof ECRRepository>[0]>;
+    };
+}
+export declare const EcrRepository: import("@intentius/chant").CompositeDefinition<EcrRepositoryProps, {
+    repository: import("@intentius/chant").Declarable & Record<string, string>;
+}>;
+//# sourceMappingURL=ecr-repository.d.ts.map

package/dist/composites/ecr-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecr-repository.d.ts","sourceRoot":"","sources":["../../src/composites/ecr-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EACL,aAAa,EAId,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,gBAAgB;IAC/B,kGAAkG;IAClG,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,SAAS,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,KAAK,CAAC;IAC1C,+CAA+C;IAC/C,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,EAAE,oBAAoB,GAAG,kBAAkB,CAAC;IACrD,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,gGAAgG;IAChG,IAAI,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,UAAU,CAAC;IACrC,qFAAqF;IACrF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,kHAAkH;IAClH,cAAc,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,kBAAkB,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,wBAAwB,GAAG,0BAA0B,CAAC;IACrG,kGAAkG;IAClG,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACpC,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,6GAA6G;IAC7G,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,EAAE;QACT,UAAU,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACtE,CAAC;CACH;AAuCD,eAAO,MAAM,aAAa;;EAyBP,CAAC"}

package/dist/composites/fargate-service.d.ts

@@ -1,5 +1,21 @@
 import { type Value } from "@intentius/chant";
 import { EcsService, TaskDefinition, TaskDefinition_MountPoint, TargetGroup, Role, Role_Policy } from "../generated/index.js";
+/**
+ * The ALB `ListenerRule`'s real `Priority` bounds (documented on
+ * `elasticloadbalancing:CreateRule`, and enforced the same way for a
+ * CloudFormation-managed rule) — not an opinion this composite holds.
+ *
+ * Exported for the same reason as `MICROVM_LIMITS` (#1374, #1420): a
+ * consumer routing to the same shared ALB through another control plane
+ * needs the same numbers, and copying them is how two sources of truth
+ * start.
+ */
+export declare const FARGATE_SERVICE_LIMITS: {
+    readonly priority: {
+        readonly min: 1;
+        readonly max: 50000;
+    };
+};
 export interface FargateServiceProps {
     clusterArn: Value<string>;
     listenerArn: Value<string>;

package/dist/composites/fargate-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fargate-service.d.ts","sourceRoot":"","sources":["../../src/composites/fargate-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EACL,UAAU,EAIV,cAAc,EAEd,yBAAyB,EAOzB,WAAW,EASX,IAAI,EACJ,WAAW,EAKZ,MAAM,cAAc,CAAC;AAItB,MAAM,WAAW,mBAAmB;IAOlC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAGhC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAGvB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IAGtB,WAAW,CAAC,EAAE;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,CAAC,EAAE,YAAY,CAAC,OAAO,yBAAyB,CAAC,EAAE,CAAC;IAC/D,SAAS,CAAC,EAAE,KAAK,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,iBAAiB,CAAC,EAAE,SAAS,GAAG,UAAU,CAAC;KAC5C,CAAC,CAAC;IAGH,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACvC,eAAe,CAAC,EAAE,MAAM,CAAC;IAGzB,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAGxE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,QAAQ,CAAC,EAAE,YAAY,CAAC,OAAO,WAAW,CAAC,EAAE,CAAC;IAC9C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE;QACT,QAAQ,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,WAAW,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAChE,CAAC;CACH;AAED,eAAO,MAAM,cAAc;;;;;;;;;;EA8OP,CAAC"}
+{"version":3,"file":"fargate-service.d.ts","sourceRoot":"","sources":["../../src/composites/fargate-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EACL,UAAU,EAIV,cAAc,EAEd,yBAAyB,EAOzB,WAAW,EASX,IAAI,EACJ,WAAW,EAKZ,MAAM,cAAc,CAAC;AAItB;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB;;;;;CAEzB,CAAC;AAEX,MAAM,WAAW,mBAAmB;IAOlC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAGhC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAGvB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IAGtB,WAAW,CAAC,EAAE;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,CAAC,EAAE,YAAY,CAAC,OAAO,yBAAyB,CAAC,EAAE,CAAC;IAC/D,SAAS,CAAC,EAAE,KAAK,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,iBAAiB,CAAC,EAAE,SAAS,GAAG,UAAU,CAAC;KAC5C,CAAC,CAAC;IAGH,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACvC,eAAe,CAAC,EAAE,MAAM,CAAC;IAGzB,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAGxE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,QAAQ,CAAC,EAAE,YAAY,CAAC,OAAO,WAAW,CAAC,EAAE,CAAC;IAC9C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE;QACT,QAAQ,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,WAAW,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAChE,CAAC;CACH;AAED,eAAO,MAAM,cAAc;;;;;;;;;;EAgPP,CAAC"}

package/dist/composites/index.d.ts

@@ -12,6 +12,10 @@ export { LambdaEventBridge } from "./lambda-eventbridge.js";
 export type { LambdaEventBridgeProps } from "./lambda-eventbridge.js";
 export { LambdaDynamoDB } from "./lambda-dynamodb.js";
 export type { LambdaDynamoDBProps } from "./lambda-dynamodb.js";
+export { EcrRepository } from "./ecr-repository.js";
+export type { EcrRepositoryProps, EcrLifecycleRule, EcrEncryption } from "./ecr-repository.js";
+export { DynamoDBTable } from "./dynamodb-table.js";
+export type { DynamoDBTableProps, DynamoDBKey, DynamoDBCapacity, DynamoDBGlobalSecondaryIndex, } from "./dynamodb-table.js";
 export { LambdaS3 } from "./lambda-s3.js";
 export type { LambdaS3Props } from "./lambda-s3.js";
 export { LambdaSns } from "./lambda-sns.js";
@@ -22,8 +26,10 @@ export { FargateAlb } from "./fargate-alb.js";
 export type { FargateAlbProps } from "./fargate-alb.js";
 export { AlbShared } from "./alb-shared.js";
 export type { AlbSharedProps } from "./alb-shared.js";
-export { FargateService } from "./fargate-service.js";
+export { FargateService, FARGATE_SERVICE_LIMITS } from "./fargate-service.js";
 export type { FargateServiceProps } from "./fargate-service.js";
+export { NlbService } from "./nlb-service.js";
+export type { NlbServiceProps } from "./nlb-service.js";
 export { RdsInstance, RdsInstance as RdsPostgres } from "./rds-instance.js";
 export type { RdsInstanceProps, RdsInstanceProps as RdsPostgresProps } from "./rds-instance.js";
 export { EfsWithAccessPoint } from "./efs-with-access-point.js";
@@ -32,12 +38,20 @@ export { SolrFargateService } from "./solr-fargate-service.js";
 export type { SolrFargateServiceProps } from "./solr-fargate-service.js";
 export { Ec2InstanceRole } from "./ec2-instance-role.js";
 export type { Ec2InstanceRoleProps } from "./ec2-instance-role.js";
+export { Ec2InstanceBundle } from "./ec2-instance-bundle.js";
+export type { Ec2InstanceBundleProps, Ec2InstanceBundleIngressRule } from "./ec2-instance-bundle.js";
 export { MinimalVpc } from "./minimal-vpc.js";
 export type { MinimalVpcProps } from "./minimal-vpc.js";
 export { EksCluster } from "./eks-cluster.js";
 export type { EksClusterProps } from "./eks-cluster.js";
 export { MicrovmApp, MICROVM_LIMITS } from "./microvm-app.js";
 export type { MicrovmAppProps, MicrovmAppResult, MicrovmAppBuildConnectorProps, MicrovmMemoryMiB } from "./microvm-app.js";
-export { AgentCoreAgent, agentCoreDefaultEndpointArn } from "./agentcore-agent.js";
+export { AgentCoreAgent, agentCoreDefaultEndpointArn, AGENTCORE_LIMITS } from "./agentcore-agent.js";
 export type { AgentCoreAgentProps, AgentCoreAgentResult } from "./agentcore-agent.js";
+export { StepFunctionsWorkflow } from "./step-functions-workflow.js";
+export type { StepFunctionsWorkflowProps } from "./step-functions-workflow.js";
+export { MonitoringStack } from "./monitoring-stack.js";
+export type { MonitoringStackProps, MonitoringMetricSpec } from "./monitoring-stack.js";
+export { BucketDeployment } from "./bucket-deployment.js";
+export type { BucketDeploymentProps, BucketDeploymentResult } from "./bucket-deployment.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/composites/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/composites/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC9G,YAAY,EACV,qBAAqB,EACrB,yBAAyB,EACzB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACvG,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACtE,YAAY,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,YAAY,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,WAAW,IAAI,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACzE,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,IAAI,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC7F,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,YAAY,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC3D,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACxH,OAAO,EAAE,cAAc,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAChF,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/composites/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC9G,YAAY,EACV,qBAAqB,EACrB,yBAAyB,EACzB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACvG,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACtE,YAAY,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,YAAY,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC5F,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,YAAY,EACV,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,4BAA4B,GAC7B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,WAAW,IAAI,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACzE,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,IAAI,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC7F,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,YAAY,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,YAAY,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAClG,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC3D,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACxH,OAAO,EAAE,cAAc,EAAE,2BAA2B,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAClG,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACnF,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,YAAY,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,YAAY,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/composites/monitoring-stack.d.ts

@@ -0,0 +1,99 @@
+/**
+ * MonitoringStack — a CloudWatch dashboard wired to up to three named
+ * metrics, with an optional alarm per metric.
+ *
+ * The recurring hand-rolled shape the aws-bench corpus surfaced: a team
+ * stands up a `cloudwatch.Dashboard`, a `cloudwatch.Metric` per resource it
+ * cares about, and a near-identical `cloudwatch.Alarm` next to each one — 44
+ * combined dashboard+alarm+metric instantiations across the corpus' 8 real
+ * CDK apps, nothing equivalent shipped in chant (epic #1139).
+ *
+ * Fixed `metric1..metric3` slots, not a `metrics: MetricSpec[]` array — a
+ * loop building `Alarm` resources from an array is exactly the control-flow-
+ * over-resources shape EVL002/EVL003 rule out for reference composites (see
+ * `EksCluster`'s `addon1..addon3`, this directory). A fourth metric is a bare
+ * `Alarm` + a hand-edited `CwDashboard.DashboardBody` the estate declares
+ * directly.
+ *
+ * What is deliberately NOT here:
+ *  - Notification wiring. `alarm.alarmActions` on each metric takes ARNs the
+ *    caller already has (an SNS topic from `LambdaSns`, or hand-declared);
+ *    this composite does not create a `Topic`/`Subscription` itself — who
+ *    gets paged and on what channel is a real per-estate decision, not a
+ *    default worth guessing. `defaults.alarm1..3` is the escape hatch for
+ *    anything else on the alarm (e.g. `OKActions`, `DatapointsToAlarm`).
+ *  - Math-expression / composite / anomaly-detection alarms (`Alarm.Metrics`,
+ *    `AlarmModel`) — single-metric threshold alarms only.
+ *  - Dynamic (`Ref`/`GetAtt`/`Sub`) values inside the dashboard body.
+ *    `CwDashboard.DashboardBody` is one flat JSON string CloudFormation does
+ *    not template, so each metric's `namespace`/`metricName`/`dimension.value`
+ *    must be a literal the caller already knows — the physical name they set
+ *    on the monitored resource, not one CloudFormation generates. The `Alarm`
+ *    resources carry no such limit: `Dimensions` is a real structured
+ *    property, so `alarm.dimensionValue` accepts `Value<string>` and can
+ *    reference a sibling resource by `Ref`/`GetAtt`.
+ */
+import { type Value } from "@intentius/chant";
+import { Alarm, CwDashboard } from "../generated/index.js";
+export interface MonitoringMetricSpec {
+    /** Dashboard widget title, and the alarm's default `AlarmName`. */
+    title: string;
+    /** CloudWatch namespace, e.g. `"AWS/Lambda"`, `"AWS/DynamoDB"`. */
+    namespace: string;
+    /** Metric name within the namespace, e.g. `"Errors"`, `"ConsumedReadCapacityUnits"`. */
+    metricName: string;
+    /**
+     * Dimension identifying which resource emits the metric, e.g.
+     * `{ name: "FunctionName", value: "my-fn" }`. Omit for an account/region-
+     * wide metric. `value` must be a literal — see the dashboard-body note above.
+     */
+    dimension?: {
+        name: string;
+        value: string;
+    };
+    /** Statistic for both the widget and (if alarmed) the alarm. Default `"Sum"`. */
+    statistic?: string;
+    /** Period in seconds, for both the widget and the alarm. Default `300`. */
+    period?: number;
+    /** Alarm this metric when set; omit for a dashboard-only metric. */
+    alarm?: {
+        threshold: number;
+        /** Default `"GreaterThanThreshold"`. */
+        comparisonOperator?: string;
+        /** Default `1`. */
+        evaluationPeriods?: number;
+        treatMissingData?: "breaching" | "ignore" | "missing" | "notBreaching";
+        /** ARNs to notify on ALARM — an existing SNS topic, typically. */
+        alarmActions?: Value<string>[];
+        /**
+         * Dimension value for the alarm. Defaults to `dimension.value`; set this
+         * instead when the alarm needs to track a `Ref`/`GetAtt` the dashboard
+         * widget cannot (see the dashboard-body note above).
+         */
+        dimensionValue?: Value<string>;
+    };
+}
+export interface MonitoringStackProps {
+    /** `Value<string>`: a name is routinely built with `Sub`/`Ref` (#1366). */
+    dashboardName?: Value<string>;
+    metric1: MonitoringMetricSpec;
+    metric2?: MonitoringMetricSpec;
+    metric3?: MonitoringMetricSpec;
+    tags?: Array<{
+        Key: string;
+        Value: string;
+    }>;
+    defaults?: {
+        dashboard?: Partial<ConstructorParameters<typeof CwDashboard>[0]>;
+        alarm1?: Partial<ConstructorParameters<typeof Alarm>[0]>;
+        alarm2?: Partial<ConstructorParameters<typeof Alarm>[0]>;
+        alarm3?: Partial<ConstructorParameters<typeof Alarm>[0]>;
+    };
+}
+export declare const MonitoringStack: import("@intentius/chant").CompositeDefinition<MonitoringStackProps, {
+    alarm3?: (import("@intentius/chant").Declarable & Record<string, string>) | undefined;
+    alarm2?: (import("@intentius/chant").Declarable & Record<string, string>) | undefined;
+    alarm1?: (import("@intentius/chant").Declarable & Record<string, string>) | undefined;
+    dashboard: import("@intentius/chant").Declarable & Record<string, string>;
+}>;
+//# sourceMappingURL=monitoring-stack.d.ts.map

package/dist/composites/monitoring-stack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"monitoring-stack.d.ts","sourceRoot":"","sources":["../../src/composites/monitoring-stack.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,EAA4B,KAAK,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,WAAW,oBAAoB;IACnC,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,wFAAwF;IACxF,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,SAAS,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,KAAK,CAAC,EAAE;QACN,SAAS,EAAE,MAAM,CAAC;QAClB,wCAAwC;QACxC,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,mBAAmB;QACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,gBAAgB,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,cAAc,CAAC;QACvE,kEAAkE;QAClE,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B;;;;WAIG;QACH,cAAc,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;KAChC,CAAC;CACH;AAED,MAAM,WAAW,oBAAoB;IACnC,2EAA2E;IAC3E,aAAa,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO,EAAE,oBAAoB,CAAC;IAC9B,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,IAAI,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE;QACT,SAAS,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC1D,CAAC;CACH;AAiDD,eAAO,MAAM,eAAe;;;;;EA2BP,CAAC"}

package/dist/composites/nlb-service.d.ts

@@ -0,0 +1,48 @@
+import { LoadBalancer, TargetGroup, Listener } from "../generated/index.js";
+export interface NlbServiceProps {
+    vpcId: string;
+    subnetIds: string[];
+    listenerPort?: number;
+    /** Port the target group forwards traffic to. Defaults to `listenerPort`. */
+    targetPort?: number;
+    /**
+     * Listener + target group protocol. `TLS` terminates TLS at the NLB and
+     * requires `certificateArn`; the other protocols pass traffic through
+     * unmodified, which is the common case for a Network Load Balancer.
+     */
+    protocol?: "TCP" | "UDP" | "TLS" | "TCP_UDP";
+    scheme?: "internet-facing" | "internal";
+    /**
+     * Target group target type. `ip` (the default) covers Fargate awsvpc tasks
+     * and any routable IP; use `instance` to register EC2 instance IDs directly,
+     * or `alb` to chain an NLB in front of an existing Application Load Balancer.
+     */
+    targetType?: "instance" | "ip" | "alb";
+    /**
+     * Static targets to register at creation time (instance IDs, IPs, or an ALB
+     * ARN depending on `targetType`). Omit when targets self-register instead —
+     * an ECS service, for instance, that references `targetGroup.TargetGroupArn`.
+     */
+    targets?: Array<{
+        id: string;
+        port?: number;
+        availabilityZone?: string;
+    }>;
+    /** ACM certificate ARN. Required when `protocol` is `TLS`. */
+    certificateArn?: string;
+    healthCheckProtocol?: "TCP" | "HTTP" | "HTTPS";
+    healthCheckPort?: string;
+    /** Only meaningful when `healthCheckProtocol` is `HTTP` or `HTTPS`. */
+    healthCheckPath?: string;
+    defaults?: {
+        nlb?: Partial<ConstructorParameters<typeof LoadBalancer>[0]>;
+        targetGroup?: Partial<ConstructorParameters<typeof TargetGroup>[0]>;
+        listener?: Partial<ConstructorParameters<typeof Listener>[0]>;
+    };
+}
+export declare const NlbService: import("@intentius/chant").CompositeDefinition<NlbServiceProps, {
+    nlb: import("@intentius/chant").Declarable & Record<string, string>;
+    targetGroup: import("@intentius/chant").Declarable & Record<string, string>;
+    listener: import("@intentius/chant").Declarable & Record<string, string>;
+}>;
+//# sourceMappingURL=nlb-service.d.ts.map

package/dist/composites/nlb-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nlb-service.d.ts","sourceRoot":"","sources":["../../src/composites/nlb-service.ts"],"names":[],"mappings":"AACA,OAAO,EACL,YAAY,EACZ,WAAW,EAEX,QAAQ,EAGT,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;IAC7C,MAAM,CAAC,EAAE,iBAAiB,GAAG,UAAU,CAAC;IACxC;;;;OAIG;IACH,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI,GAAG,KAAK,CAAC;IACvC;;;;OAIG;IACH,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1E,8DAA8D;IAC9D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;IAC/C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uEAAuE;IACvE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE;QACT,GAAG,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,WAAW,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,QAAQ,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC/D,CAAC;CACH;AAED,eAAO,MAAM,UAAU;;;;EAoEP,CAAC"}